Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e684461b-e894-34c6-9c17-6fb976bc57af.roa
File:                     e684461b-e894-34c6-9c17-6fb976bc57af.roa (raw, json)
Hash identifier:          eHVgk32UrB3dmS9J2N6+MHvqNqpA68QPtoANghBsna8=
Subject key identifier:   29:A3:D2:0B:D8:C6:31:35:73:54:15:EA:58:0A:BE:64:AB:DF:C9:BC
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B6A61FDFB9BA83F5D61294D00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e684461b-e894-34c6-9c17-6fb976bc57af.roa
Signing time:             Sun 05 Oct 2025 01:00:32 +0000
ROA not before:           Sun 05 Oct 2025 01:00:32 +0000
ROA not after:            Sat 03 Jan 2026 02:00:32 +0000
asID:                     396566
IP address blocks:        192.58.128.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6a:61:fd:fb:9b:a8:3f:5d:61:29:4d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct  5 01:00:32 2025 GMT
            Not After : Jan  3 02:00:32 2026 GMT
        Subject: CN=e6b118f5-77c9-4e8a-ae62-47d7372aad9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d1:30:21:e5:96:46:38:53:b9:70:90:fb:3c:
                    d5:53:65:6c:d6:94:0f:c6:f7:10:ba:23:a3:89:68:
                    f3:51:d5:35:6a:99:15:7b:7e:dd:ce:e4:92:97:70:
                    49:ee:13:6c:59:c2:1c:fc:cb:68:c4:91:c5:10:c2:
                    8c:8d:00:31:36:61:9c:b0:bb:a3:34:43:74:77:f7:
                    9f:62:8a:12:5e:5d:34:97:f7:9c:77:83:e6:3a:73:
                    fd:e4:19:be:3b:b8:ed:25:1b:1f:34:e2:d9:8c:90:
                    d0:26:d8:7f:48:f4:ab:15:ef:d5:22:ac:4f:14:99:
                    78:58:aa:21:75:df:73:fb:80:d0:7b:2f:f7:a9:34:
                    a8:dd:76:eb:04:11:c6:97:43:c6:df:35:bd:7c:c9:
                    96:10:52:41:29:ea:87:ff:8d:7e:75:ea:14:7e:b8:
                    bb:07:8a:a0:06:a1:07:e4:2b:84:32:47:f2:fc:1e:
                    05:1a:0e:c4:a3:25:bb:96:e6:55:1b:f1:63:26:db:
                    ab:2c:5c:8e:43:55:ca:6c:cf:4b:6b:93:3c:27:28:
                    7f:f1:77:cc:d8:e7:c7:43:ab:92:57:b2:45:1f:9c:
                    6b:95:0e:cf:60:c4:f0:d8:f9:57:cf:b6:63:7d:62:
                    a9:2e:ce:7c:ce:38:c2:c3:0e:f6:18:42:c7:23:87:
                    b5:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:A3:D2:0B:D8:C6:31:35:73:54:15:EA:58:0A:BE:64:AB:DF:C9:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e684461b-e894-34c6-9c17-6fb976bc57af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.58.128.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:bb:96:14:bc:bd:67:84:2c:05:a6:c3:82:8d:db:72:52:64:
         cf:8f:54:14:6d:da:4c:78:b9:85:4d:c5:5f:52:03:c3:74:ba:
         c7:45:ce:3c:82:7d:14:f7:cc:ea:e1:00:44:d7:6d:93:2f:99:
         ad:35:da:90:74:df:b4:54:92:ec:80:66:9f:09:a8:2d:27:33:
         74:8b:61:b0:24:ea:d6:c8:06:b4:c7:37:18:cc:aa:00:7f:1c:
         3e:f3:ad:92:48:8f:7c:4a:c4:c0:79:67:21:d7:23:d0:28:ea:
         15:30:fb:b4:e9:b9:34:78:69:ee:c5:9b:c5:1f:1e:17:7b:f3:
         f7:80:9b:be:cd:ce:7a:95:8c:97:ff:21:cf:4e:5e:4a:bb:ad:
         de:1f:b9:40:17:71:ea:a9:44:62:03:8d:a4:e2:f7:0b:f1:77:
         cb:3c:06:3e:f6:3a:8e:d5:b8:1d:12:15:1f:55:01:d0:15:40:
         35:b3:a4:2b:1c:46:cc:14:17:c0:10:01:5b:cf:4e:4c:5b:40:
         15:d9:56:1b:9f:27:19:ea:19:d8:cd:31:b8:8d:ec:cb:96:b9:
         9d:ad:8c:ad:81:22:d0:73:c5:e5:43:96:44:a0:d4:d3:34:f4:
         80:d0:a0:80:7e:a6:b4:3c:f3:f0:0e:62:20:25:58:b7:ef:4f:
         c1:a8:d4:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:54:47 2025 by rpki-client